$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d5111b7-a002-3ec9-b5e4-b94fb01f2408.roa File: 2d5111b7-a002-3ec9-b5e4-b94fb01f2408.roa (raw, json) Hash identifier: B9vCOE8BgH9koAXQ7z/MjbDV2hC/7yI8isXCXpV6Cgs= Subject key identifier: A9:D1:75:80:53:AC:36:BD:1D:05:5B:F6:41:19:39:37:12:52:53:2D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA76F548CB2C00783896B8 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d5111b7-a002-3ec9-b5e4-b94fb01f2408.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.94.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:76:f5:48:cb:2c:00:78:38:96:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=ba6da8b0-fc43-437e-8d32-442d2129fba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5b:49:a4:b7:5f:81:a7:d2:0a:e6:21:41:a3: 5c:f1:cf:2f:98:f4:4b:a1:f8:7c:d1:33:1c:61:12: 17:81:e6:c4:a5:53:3c:6c:48:67:21:7e:8b:f7:67: 30:86:c4:9c:ec:7f:72:d1:5b:e1:46:5a:b9:19:f8: 6e:0d:3c:bf:c9:38:7d:c6:7d:83:d0:a4:21:ce:1e: 15:d0:86:0e:e3:4a:1e:38:a1:bb:25:e0:2f:74:25: c6:b2:cc:9f:56:af:da:9d:05:a7:2b:e7:b4:d7:8c: b1:21:c1:78:6c:f0:14:31:a0:1b:27:e3:b4:63:15: 7b:e9:51:31:9e:a4:a1:16:f5:05:81:7d:c1:d9:19: a0:7f:1b:97:fd:90:ae:46:e3:12:e2:36:f9:86:40: 1e:fd:9b:f9:30:99:a0:db:18:b4:63:8b:36:dc:ae: d9:02:0c:0d:77:c0:a2:e0:63:60:45:11:e4:ba:95: 89:d2:0d:38:29:52:9e:cd:21:10:b5:bc:25:ec:8f: 7f:80:68:d4:2b:f8:da:69:2a:aa:2d:b0:7a:fe:0a: 28:f3:c4:c4:1e:1b:e3:df:fa:50:cd:59:b3:67:48: b2:cf:ae:88:fa:97:d9:53:0d:43:a5:c7:c1:27:cf: 6c:b1:2f:39:c9:08:4e:84:1f:3e:42:74:2b:62:a1: db:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D1:75:80:53:AC:36:BD:1D:05:5B:F6:41:19:39:37:12:52:53:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d5111b7-a002-3ec9-b5e4-b94fb01f2408.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.94.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:ed:c1:51:0a:79:9b:aa:6f:cc:bd:b1:b3:85:23:08:21:4b: e8:f6:90:8b:6e:a5:35:f1:8d:16:da:6c:5e:19:87:10:e5:f1: 58:71:ab:d8:05:85:d4:fa:39:f1:b2:1f:19:5b:8a:e6:c1:71: 17:93:df:4c:42:1f:1d:73:d0:5c:5a:bb:a6:6a:5b:2a:c1:34: c7:57:44:9c:09:a2:52:0e:ee:cc:d0:69:c2:a1:5c:fd:b7:1c: c1:cb:6a:f2:b0:5b:fb:81:39:9f:94:95:6a:d9:28:e3:a5:67: 34:ae:72:91:ae:84:70:e9:24:d4:fc:27:9a:8e:50:cc:e7:2f: f8:4f:7d:59:88:74:ca:6e:32:da:55:d4:37:8e:51:10:bd:93: 74:f3:2b:79:7f:e2:4f:8a:67:43:6a:21:f6:66:49:62:13:ee: 1c:35:2e:d7:70:a1:de:23:44:24:79:7e:01:a2:9c:98:14:fd: aa:ad:fc:13:5c:4c:20:86:32:22:4e:38:89:43:a3:7d:c1:74: 9b:a7:c2:28:f6:e7:20:d2:74:6c:dd:64:49:41:e5:b4:8b:c4: 00:f3:4d:59:d2:28:4b:04:43:55:e1:f9:7a:aa:1f:46:b4:56: 11:ef:30:3c:96:9e:c2:80:23:e3:63:35:8d:43:2a:38:38:4b: 2d:87:cb:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqnb1SMssAHg4lrgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk YmE2ZGE4YjAtZmM0My00MzdlLThkMzItNDQyZDIxMjlmYmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFtJpLdfgafSCuYhQaNc8c8vmPRLofh80TMc YRIXgebEpVM8bEhnIX6L92cwhsSc7H9y0VvhRlq5GfhuDTy/yTh9xn2D0KQhzh4V 0IYO40oeOKG7JeAvdCXGssyfVq/anQWnK+e014yxIcF4bPAUMaAbJ+O0YxV76VEx nqShFvUFgX3B2RmgfxuX/ZCuRuMS4jb5hkAe/Zv5MJmg2xi0Y4s23K7ZAgwNd8Ci 4GNgRRHkupWJ0g04KVKezSEQtbwl7I9/gGjUK/jaaSqqLbB6/goo88TEHhvj3/pQ zVmzZ0iyz66I+pfZUw1DpcfBJ89ssS85yQhOhB8+QnQrYqHb2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnRdYBTrDa9HQVb9kEZOTcSUlMtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmQ1MTExYjctYTAwMi0z ZWM5LWI1ZTQtYjk0ZmIwMWYyNDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIl6wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrtwVEKeZuqb8y9sbOFIwghS+j2kItupTXxjRbabF4ZhxDl8Vhxq9gF hdT6OfGyHxlbiubBcReT30xCHx1z0Fxau6ZqWyrBNMdXRJwJolIO7szQacKhXP23 HMHLavKwW/uBOZ+UlWrZKOOlZzSucpGuhHDpJNT8J5qOUMznL/hPfVmIdMpuMtpV 1DeOURC9k3TzK3l/4k+KZ0NqIfZmSWIT7hw1Ltdwod4jRCR5fgGinJgU/aqt/BNc TCCGMiJOOIlDo33BdJunwij25yDSdGzdZElB5bSLxADzTVnSKEsEQ1Xh+XqqH0a0 VhHvMDyWnsKAI+NjNY1DKjg4Sy2Hy5M= -----END CERTIFICATE-----Generated at Thu Mar 19 01:48:19 2026 by rpki-client